MAL-2025-175604 Malicious code in ksai-kaisom-olakialio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8be3a9f244b3329d3f35d03c3fe27e2fb20802ab72ed39d7e3bd10185a717f64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178368 Malicious code in saaaya-salwa-tea (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 213b20240285c4b1efd8add204be2a9b30867d9732d7604b5dcf50567c0f1325 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175447 Malicious code in kapvino-sovni-farvi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fee891e0db4b21ab22e6dfdfee333d319c16dc4134ea9018227aaf04f4baa2f1 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173263 Malicious code in buis-sunina-mubanava (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector eb1c719f5671c73d88f9724a855f0e802363d82c1c9df1869f122c3a2a59ee3b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178261 Malicious code in rintono-poke107 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d22bcec689bf541b9955a12713b9d3de5741f9756cc7df511a72e50f712c954a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-178787 Malicious code in tanuir-sofai-du (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0f2d7aab3b7ad907d1566a261cc372a0a81d075233509f74ffaaa8646e2ae3a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173468 Malicious code in buta-fna-igaghfnaa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 13f44da0a87d844e96f35d1e1b524d73f9b768cbcebe4e843ae84eb2e5ff40ac This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-175628 Malicious code in ksai-kil-koki (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4ad1ed36bf7ffee710d9cfc80e9ffcc0e80625ee4f1a83d27149346aa7e91d1b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-179113 Malicious code in thambi-vsbers-burtd (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a62cae108d8a2913ed96327d6e1cd6e46d6eab995df655774bb25460ec5d6183 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-gibga-agka (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c465648a55ed6a25186807c0904850572dffbc38bfd2b89ed4387a6aa9d3ae50 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in polymer-afia-goafga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 278144f5242cb2646164ed63a8ae9d4cef40edcda53a84863d3ffea20b43964a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in tray-upozp-namaaio (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 0ef19986e962687174a52b80663cd1460794afcb70235a9f3e6c9b71d39b5465 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in haritono-poke1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 625629c2c2ce7e4171a991d5149ee39bdf290161a89d6ef0624657551eb4dff3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in godiva-tumva-dialu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector da4e726ea384f811221808315fcd3204d87702fb07ed787e49061bc9f4956aa3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in butahu-asfaui-dufusu (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 67be8c319bc861b87da7fa94b9c68507554c750759018fb978fb05ad27bf95be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in hitachi-poke67 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1f6275af897c19dfb4443a4b10be3fefa1fa3af6450960765f5da5f327974a06 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kapvino-socvni-bofi (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 91a5a8c8b81836128cc0be516d8cc5f39ae395b4320ca7082d314b4d68deb7a5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in sahunim-satudufui-fadabida (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7f0abb9835d99545b9dfe1933ba6b48c0f7c5f17c6ed0783f470dbd6ce0b64c8 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in kupaio-kulaka-jokiosimalo (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 291bda3437b8ca38ffdf47fbef758ceda917f7c20e292194c3e627ccebc7619f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-173727 Malicious code in butauahur-sofi-dosapih (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector fb1b8ba026d56a76e5791a5b79e9a2191d6c8916061798eb7ba7e47d90a711c3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...